D-Link Dir-820lw Firmware vulnerabilities

3 CVEs affecting D-Link Dir-820lw Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4499, published 2026-03-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-45382: D-Link Multiple Routers Remote Code Execution Vulnerability, published 2022-02-17. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-04. EPSS: 97.8% chance of exploitation in the next 30 days. A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file.…
CVE-2026-4499, published 2026-03-20. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgi_main of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be…
CVE-2024-41610, published 2024-07-30. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.